9ec2e1ac59d38278cf1fe71b069f6090_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ec2e1ac59d38278cf1fe71b069f6090_NeikiAnalytics.exe
Size

1.0MB
MD5

9ec2e1ac59d38278cf1fe71b069f6090
SHA1

9ca75dd117b0a5b9bad063f034dbe81d9f6b486d
SHA256

11327859102140968ebe005015c3d34112d6b84b233bda8da31b2ced5fd4bb87
SHA512

a46e757c13fd33e8d746a41851f3823c356819f4e7af9680187afcffc0b1f6bc6f3832f2c7e2ac8f0674e8243e43812f6615b8bf8bc282f28f287ca2fcf2dc18
SSDEEP

12288:8NLEO9SCQDCffK1Ju2KTGeaNVkEkS+m5CZ/ng:8NAOA16Fm5Ifg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ec2e1ac59d38278cf1fe71b069f6090_NeikiAnalytics.exe

Files

9ec2e1ac59d38278cf1fe71b069f6090_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\TFSProjects\BD\NET\Petroleum\Environmental\EPA\Store\EPA\QT.EPV700\obj\Debug\QT.EPA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1019KB - Virtual size: 1018KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ